coldfusionx Goto Github PK

awesome-bugbounty-writeups

A curated list of bugbounty writeups (Bug type wise) , inspired from https://github.com/ngalongc/bug-bounty-reference

buffer-overflow-guide

This Bufferflow Guide includes instructions and the scripts necessary for Buffer Overflow Exploitation. This guide is a supplement for TheCyberMentor's walkthrough. Please watch his walkthrough if you're confused. Feel free to implement Pull Requests or raise Issues.

cheatsheet-god

Penetration Testing Reference Bank - OSCP / PTP & PTX Cheatsheet

code-snippets

Various code snippets

coldfusionx

coldfusionx.github.io

ctf-writeups

ctf-writeups-public

Writeups for infosec Capture the Flag events by team Galaxians

cve-2019-11447_cutenews-avataruploadrce

Exploit Code for CVE-2019-11447 aka CuteNews 2.1.2 Avatar upload RCE (Authenticated)

cve-2019-17240_bludit-bf-bypass

Bludit <= 3.9.2 - Authentication Bruteforce Mitigation Bypass Exploit/PoC

cve-2020-9484

POC - Apache Tomcat Deserialization Vulnerability (CVE-2020-9484)

cve-2021-26085

Atlassian Confluence Server 7.5.1 Pre-Authorization Arbitrary File Read vulnerability (CVE-2021-26085)

cve-2021-26086

Atlassian Jira Server/Data Center 8.4.0 - Arbitrary File read (CVE-2021-26086)

cve-2021-34429

POC for CVE-2021-34429 - Eclipse Jetty 11.0.5 Sensitive File Disclosure

cve-2021-44228-log4shell-poc

POC for Infamous Log4j CVE-2021-44228

cve-2022-24124

POC for CVE-2022-24124

cve-2022-26134

Atlassian Confluence OGNL Injection Remote Code Execution (RCE) Vulnerability (CVE-2022-26134)

cve-2022-36804

Atlassian Bitbucket Server and Data Center - Command Injection Vulnerability (CVE-2022-36804)

cve-2022-44877-cwp7

Control Web Panel 7 (CWP7) Remote Code Execution (RCE) (CVE-2022-44877) (Unauthenticated)

cve-bin-tool

This tool scans for a number of common, vulnerable components (openssl, libpng, libxml2, expat and a few others) to let you know if your system includes common libraries with known vulnerabilities.

digitalstriker

Digital Implementation of High Striker using FSR with PIC18F4550 Micro-controller

docker-php-helloworld

A simple PHP application deployed using Docker

dockerized_backdrop_cms

The Backdrop CMS in a Docker Container.

hackthebox-writeups

Writeups for HacktheBox 'boot2root' machines

howtohunt

Tutorials and Things to Do while Hunting Vulnerability.

information-security-policy

keycloak-12.0.1-cve-2020-10770

Keycloak 12.0.1 - 'request_uri ' Blind Server-Side Request Forgery (SSRF) (Unauthenticated)

keysunveil

Authenticated Memcached Keys Brute force Script

labscripts

Scripts that I wrote & used in HackTheBox and other CTF's

log4j-scan

A fully automated, accurate, and extensive scanner for finding log4j RCE CVE-2021-44228